K8s 集群用 ingress-nginx 暴露 HTTP 服务,配置过几轮后总结了一些常用 snippet。
基础 ingress:
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: app
annotations:
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
nginx.ingress.kubernetes.io/proxy-read-timeout: "300"
spec:
rules:
- host: app.example.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: app
port: { number: 80 }
常用 annotation:限流(limit-rps)、CORS、basic auth、canary。证书走 cert-manager 自动签发。
大家的 ingress 都用啥?Traefik / Caddy / Nginx?